Methods and instructions for patch management

Abstract

In one aspect, a method of instructing users in the implementation of a patch management process is provided. The patch management process relates to the installation of a software patch in a computer system. The method comprises an act of providing instructions that describe the patch management process in a hierarchical manner so that the patch management process is described as comprising a plurality of top-level activities, with each of the plurality of top-level activities being described as comprising at least one sub-action, the instructions describing trigger events that result in transitions between the top-level activities. In another aspect, a method includes following the instructions that describe the patch management process. In another aspect, an assess activity is performed distinct from the installation of any particular patch to assess the computer system to determine the preparedness of the computer system to process future anticipated but unspecified patches

Description

FIELD OF THE INVENTION

[0001] The present invention relates to implementing and instructing users to implement and administer a patch management process for installing one or more software patches in a computer system. BACKGROUND OF THE INVENTION

[0002] Patch management describes processes involved in identifying and deploying a software update, also referred to as a patch, into a computing environment. For example, interim software patches may become available that overcome security vulnerabilities in a networked computer system. Similarly, improved software releases that update a computer system to facilitate operational efficiency and effectiveness of the computer system may become available. Without timely deployment of new software patches, security vulnerabilities may be exploited, which may lead to loss of revenue from failure of one or more services and / or downtime of the computer system, loss of profits due to cost of repairs, loss or theft of valuable data assets, etc. [00...

Examples

Example

[0036] Applicant has appreciated that existing patch management process guidelines have been difficult to follow and implement, and therefore have never gained wide acceptance. The result being that many IT operations still do not follow any discernable process for deploying patches, service packs and the like. Applicant has appreciated that at least one reason a standard and robust approach to patch management has not been widely accepted and used by the IT industry may include a lack of comprehensible instruction on how to build, deploy and maintain an effective patch management process.

[0037] In one embodiment, instructions for implementing a patch management process in a networked computer system are provided. The instructions describe the patch management process as having a plurality of top-level activities that may be performed in a generally continuous cycle. The top-level activities include assessing computer assets in the networked computer system to gain an understanding...

FIELD OF THE INVENTION

[0001] The present invention relates to implementing and instructing users to implement and administer a patch management process for installing one or more software patches in a computer system. BACKGROUND OF THE INVENTION

[0002] Patch management describes processes involved in identifying and deploying a software update, also referred to as a patch, into a computing environment. For example, interim software patches may become available that overcome security vulnerabilities in a networked computer system. Similarly, improved software releases that update a computer system to facilitate operational efficiency and effectiveness of the computer system may become available. Without timely deployment of new software patches, security vulnerabilities may be exploited, which may lead to loss of revenue from failure of one or more services and / or downtime of the computer system, loss of profits due to cost of repairs, loss or theft of valuable data assets, etc. [00...

Examples

Example

[0036] Applicant has appreciated that existing patch management process guidelines have been difficult to follow and implement, and therefore have never gained wide acceptance. The result being that many IT operations still do not follow any discernable process for deploying patches, service packs and the like. Applicant has appreciated that at least one reason a standard and robust approach to patch management has not been widely accepted and used by the IT industry may include a lack of comprehensible instruction on how to build, deploy and maintain an effective patch management process.

[0037] In one embodiment, instructions for implementing a patch management process in a networked computer system are provided. The instructions describe the patch management process as having a plurality of top-level activities that may be performed in a generally continuous cycle. The top-level activities include assessing computer assets in the networked computer system to gain an understanding...

Images